PHPCorrector

PHPCorrector is a PHP specific tool that has the role of scanning the code and finding vulnerabilities. To be more precise, the scripts are designed to identify the Cross-Site Scripting and Structured Query Language Injection vulnerabilities and automatically correct them. As indicated by the name, the tool works solely with web applications designed in PHP.

Irrespective of whether it is because of forgetting to validate or sanitize form inputs, application design flaws or the misconfiguration web servers, the vulnerabilities of web applications represent an invitation to hackers to exploit them. Unlike the asset or network vulnerabilities, the ones associated with web apps arise mainly due to the fact that they need to interact with multiple users across various networks.

The Cross-Site Scripting or XSS entails an attack on the stored data – user credentials or sensitive financial information for instance – whereas the SQL Injection imply slipping malicious commands into the database for the purpose of stealing or deleting data. The difference between them is that for XSS scripts, they are run directly in the users' browser, whereas the latter targets servers that contain sensitive information. XSS is more dangerous, as the data is basically hijacked via the malicious scripting without the users realizing there was even a problem in the first place.